CVE-2026-0925: Tanium addressed an improper input validation vulnerability in Discover.

Q: What access does an attacker need to exploit this issue?

The vulnerability is remotely reachable over the network and has low attack complexity, but exploitation requires high privileges. No user interaction is required.

Q: What is the expected security impact if exploitation succeeds?

The reported impact is limited to availability, with low availability impact. No confidentiality or integrity impact is reported.

Published Jan 26, 2026

Updated

Tanium addressed an improper input validation vulnerability in Discover.

Affected Software

2 affected components

Tanium Discover>=4.10<4.10.134

Tanium Discover>=4.15<4.15.130

Event History

Jan 26, 2026

CVE Published

via MITRE·05:51 PM

Data Sourced

via MITRE·05:51 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The vulnerability is remotely reachable over the network and has low attack complexity, but exploitation requires high privileges. No user interaction is required.

What is the expected security impact if exploitation succeeds?